Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
File: 1OodcM1C51E6wjM51h241Ap--tg.cer (raw, json)
Hash identifier: 6W3zierekIU2ARkjS5aRyHsLwmoal4mywpCvoL4WRkU=
Subject key identifier: D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F90D1D4FEF8026BB1BB32433092EA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 74.209.169.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:0d:1d:4f:ef:80:26:bb:1b:b3:24:33:09:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:b6:24:6d:2d:13:a4:02:62:42:2f:a6:9d:
4c:01:03:34:9e:c7:ec:26:f1:b7:6f:36:99:66:7f:
31:97:e9:e1:6d:97:13:49:7d:ab:42:f2:57:07:43:
2f:96:97:18:6f:92:43:ba:47:51:a2:4a:c2:7a:9a:
55:c1:6d:68:3c:ab:12:d2:72:c7:69:cc:31:ec:3e:
2d:f0:ca:ba:37:de:a0:9b:b4:59:5e:bb:b2:77:a9:
1d:ad:80:4c:3c:f1:94:c4:74:fa:0f:0f:34:77:e8:
45:be:c1:9f:86:b0:d7:35:c8:39:f0:21:37:db:02:
5a:d8:64:4f:05:11:35:1e:c5:b0:68:27:f9:16:03:
4e:e2:1b:e8:f4:ef:f7:fa:9c:fc:27:02:f8:10:99:
43:ac:d2:ac:a7:bd:59:6b:13:7f:8d:35:0d:82:c7:
1e:ae:14:3d:8c:5f:23:7a:6f:ea:1e:7a:33:d8:d4:
76:a2:b0:38:98:9c:21:54:d4:51:a2:f5:a7:fd:f9:
36:26:a1:14:0e:c6:f7:2b:19:07:02:49:70:c6:54:
b2:b1:0c:ce:87:4b:39:e4:7e:c7:02:3a:10:75:7f:
66:cc:a4:34:53:9e:66:f3:b1:64:2d:bc:6d:36:24:
76:ea:65:f7:51:59:df:5f:d3:00:03:7a:24:d0:50:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.209.169.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2e:a3:28:39:8a:85:8f:47:e7:3b:6a:89:c5:b8:22:e5:63:
0a:b5:20:17:d8:30:d4:94:57:eb:14:0d:f4:0d:37:5b:7b:e5:
f7:b8:78:48:02:7d:67:3e:d8:0c:69:78:ee:d1:d6:9d:01:ec:
ac:50:70:a1:c8:37:8a:9b:d7:e8:49:85:f1:2c:0a:94:f9:d8:
ea:f0:25:55:3a:ed:92:61:91:d7:e4:ab:60:2d:09:a5:da:33:
cc:2a:e2:30:c7:50:1a:18:f1:15:72:f8:4c:ca:ef:b7:4f:4d:
57:37:b5:e2:5f:1c:74:5c:1e:45:31:c9:c4:00:f3:e7:47:96:
43:f7:f9:c2:75:bd:64:a2:fa:fd:8d:9d:c1:99:1f:e8:26:46:
65:cc:74:cd:3b:e7:2b:63:ea:d5:6b:55:f8:a7:d4:0f:fe:e5:
61:c6:5f:3f:0c:25:56:ce:0d:b3:42:55:d6:98:29:75:fc:b5:
90:21:87:1c:0f:78:f7:fe:d5:0d:f3:6c:50:c2:0a:57:27:3d:
46:7d:6e:54:60:65:70:fc:62:fe:51:50:33:71:d0:1e:df:4a:
b1:f3:5b:a0:03:3e:b0:fb:9b:e4:fe:85:62:4b:13:c5:e5:e6:
1a:b3:cb:95:ab:39:72:b2:53:bd:d9:21:fa:01:0f:d3:d4:c6:
fa:90:bf:9c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+Q0dT++AJrsbsyQzCS6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGVhMWQ3MGNkNDJlNzUxM2FjMjMzMzlkNjFkYjhkNDBhN2VmYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo262JG0tE6QCYkIvpp1MAQM0nsfs
JvG3bzaZZn8xl+nhbZcTSX2rQvJXB0MvlpcYb5JDukdRokrCeppVwW1oPKsS0nLH
acwx7D4t8Mq6N96gm7RZXruyd6kdrYBMPPGUxHT6Dw80d+hFvsGfhrDXNcg58CE3
2wJa2GRPBRE1HsWwaCf5FgNO4hvo9O/3+pz8JwL4EJlDrNKsp71ZaxN/jTUNgsce
rhQ9jF8jem/qHnoz2NR2orA4mJwhVNRRovWn/fk2JqEUDsb3KxkHAklwxlSysQzO
h0s55H7HAjoQdX9mzKQ0U55m87FkLbxtNiR26mX3UVnfX9MAA3ok0FDbLwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNTqHXDNQudROsIzOdYduNQKfvrYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzZiZmI4
Zi0zYzQ2LTRjYzItYWNmZC00ZjllODk1NjMxZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvNmJmYjhm
LTNjNDYtNGNjMi1hY2ZkLTRmOWU4OTU2MzFmZS8xLzFPb2RjTTFDNTFFNndqTTUx
aDI0MUFwLS10Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAStGpMA0GCSqGSIb3DQEBCwUAA4IBAQBgLqMo
OYqFj0fnO2qJxbgi5WMKtSAX2DDUlFfrFA30DTdbe+X3uHhIAn1nPtgMaXju0dad
AeysUHChyDeKm9foSYXxLAqU+djq8CVVOu2SYZHX5KtgLQml2jPMKuIwx1AaGPEV
cvhMyu+3T01XN7XiXxx0XB5FMcnEAPPnR5ZD9/nCdb1kovr9jZ3BmR/oJkZlzHTN
O+crY+rVa1X4p9QP/uVhxl8/DCVWzg2zQlXWmCl1/LWQIYccD3j3/tUN82xQwgpX
Jz1GfW5UYGVw/GL+UVAzcdAe30qx81ugAz6w+5vk/oViSxPF5eYas8uVqzlyslO9
2SH6AQ/T1Mb6kL+c
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:31 2026 by rpki-client